Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior
Críticas / altas1284▼ 85 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior
8 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5) | 2.5% | — | Aspportal | 2/3/2009 | 16/6/2026 | ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to ASPPortal.mdb. | |
| Modificada | Alta (7.5) | 2.1% | — | Aspapps Aspportal | 16/12/2008 | 16/6/2026 | Multiple SQL injection vulnerabilities in ASP Portal allow remote attackers to execute arbitrary SQL commands via the (1) ItemID parameter to classifieds.asp and the (2) ID parameter to Events.asp. | |
| Modificada | Media (5) | 5.2% | — | Aspapps Aspportal | 15/12/2008 | 16/6/2026 | ASPPortal stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for xportal.mdb. | |
| Modificada | Alta (7.5) | 1.00% | — | Aspportal | 28/11/2008 | 16/6/2026 | SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter. | |
| Modificada | Alta (7.5) | 1.2% | — | Aspportal | 14/11/2006 | 16/6/2026 | SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll_ID parameter, a different vector than CVE-2006-1353. | |
| Modificada | Alta (7.5) | 4.4% | — | Aspportal | 22/3/2006 | 16/6/2026 | Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to… | |
| Modificada | Alta (7.5) | 1.6% | — | Aspportal | 19/3/2006 | 16/6/2026 | Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors. | |
| Modificada | Media (4.3) | 1.4% | — | Aspportal | 19/3/2006 | 16/6/2026 | Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. |